Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the replicationTaskExecutor process. An attacker can alter the state, description, owner, retention, archival settings, and cluster list of local namespaces by sending crafted inbound namespace replicatio...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the replicationTaskExecutor process. An attacker can alter the state, description, owner, retention, archival settings, and cluster list of local namespaces by sending crafted inbound namespace replicatio...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the replicationTaskExecutor process. An attacker can alter the state, description, owner, retention, archival settings, and cluster list of local namespaces by sending crafted inbound namespace replicatio...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the replicationTaskExecutor process. An attacker can alter the state, description, owner, retention, archival settings, and cluster list of local namespaces by sending crafted inbound namespace replicatio...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the replicationTaskExecutor process. An attacker can alter the state, description, owner, retention, archival settings, and cluster list of local namespaces by sending crafted inbound namespace replicatio...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the replicationTaskExecutor process. An attacker can alter the state, description, owner, retention, archival settings, and cluster list of local namespaces by sending crafted inbound namespace replicatio...

GitHub PAT written to debug artifacts

Impact summary In some circumstances, debug artifacts uploaded by the CodeQL Action after a failed code scanning workflow run may contain the environment variables from the workflow run, including any secrets that were exposed as environment variables to the workflow. Users with read access to th...

CVE-2025-24362 CodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts

In some circumstances, debug artifacts uploaded by the CodeQL Action after a failed code scanning workflow run may contain the environment variables from the workflow run, including any secrets that were exposed as environment variables to the workflow. Users with read access to the repository...